From 678a593e62173d59ef35dcc3e1e92141839b55cb Mon Sep 17 00:00:00 2001 From: "Edward Z. Yang" Date: Fri, 3 Aug 2007 03:20:49 +0000 Subject: [PATCH] Release 2.1.0, merged in 1313 to HEAD. git-svn-id: http://htmlpurifier.org/svnroot/htmlpurifier/branches/strict@1352 48356398-32a2-884e-a903-53898d9a118a --- Doxyfile | 2 +- VERSION | 2 +- WHATSNEW | 20 +- configdoc/generate.php | 2 + docs/dev-code-quality.txt | 6 +- docs/enduser-security.txt | 4 +- docs/enduser-uri-filter.html | 201 +++++++++++ docs/index.html | 3 + docs/proposal-filter-levels.txt | 2 +- docs/proposal-new-directives.txt | 5 +- docs/style.css | 3 + maintenance/common.php | 9 + maintenance/flush-definition-cache.php | 36 ++ maintenance/flush-htmldefinition-cache.php | 23 -- maintenance/generate-entity-file.php | 8 +- maintenance/merge-library.php | 198 +++++++++++ tests/HTMLPurifier/AttrCollectionsTest.php | 2 +- .../AttrDef/CSS/FontFamilyTest.php | 4 + tests/HTMLPurifier/AttrDef/URITest.php | 324 +++--------------- tests/HTMLPurifier/AttrDefHarness.php | 16 +- tests/HTMLPurifier/AttrDefTest.php | 2 +- tests/HTMLPurifier/AttrTransformHarness.php | 4 +- tests/HTMLPurifier/AttrTransformTest.php | 2 +- tests/HTMLPurifier/AttrTypesTest.php | 2 +- tests/HTMLPurifier/ChildDefHarness.php | 4 +- tests/HTMLPurifier/ComplexHarness.php | 129 +++++++ tests/HTMLPurifier/ConfigSchemaTest.php | 2 +- tests/HTMLPurifier/ConfigTest.php | 2 +- tests/HTMLPurifier/ContextTest.php | 2 +- .../DefinitionCache/SerializerTest.php | 3 +- .../DefinitionCacheFactoryTest.php | 2 +- tests/HTMLPurifier/DefinitionCacheHarness.php | 2 +- tests/HTMLPurifier/DefinitionCacheTest.php | 2 +- tests/HTMLPurifier/DefinitionTest.php | 2 +- tests/HTMLPurifier/DoctypeRegistryTest.php | 2 +- tests/HTMLPurifier/ElementDefTest.php | 2 +- tests/HTMLPurifier/EncoderTest.php | 2 +- tests/HTMLPurifier/EntityLookupTest.php | 2 +- tests/HTMLPurifier/EntityParserTest.php | 2 +- tests/HTMLPurifier/ErrorCollectorTest.php | 2 +- tests/HTMLPurifier/ErrorsHarness.php | 2 +- tests/HTMLPurifier/GeneratorTest.php | 6 +- tests/HTMLPurifier/HTMLDefinitionTest.php | 7 +- tests/HTMLPurifier/HTMLModule/RubyTest.php | 56 +++ tests/HTMLPurifier/HTMLModule/TidyTest.php | 2 +- tests/HTMLPurifier/HTMLModuleManagerTest.php | 2 +- tests/HTMLPurifier/HTMLModuleTest.php | 2 +- tests/HTMLPurifier/Harness.php | 147 +++----- tests/HTMLPurifier/IDAccumulatorTest.php | 2 +- tests/HTMLPurifier/LanguageFactoryTest.php | 2 +- tests/HTMLPurifier/LanguageTest.php | 2 +- tests/HTMLPurifier/Lexer/DirectLexTest.php | 2 +- tests/HTMLPurifier/LexerTest.php | 2 +- tests/HTMLPurifier/PercentEncoderTest.php | 2 +- tests/HTMLPurifier/Strategy/CompositeTest.php | 2 +- .../HTMLPurifier/Strategy/FixNestingTest.php | 12 +- .../RemoveForeignElements_ErrorsTest.php | 2 +- tests/HTMLPurifier/StrategyHarness.php | 5 +- tests/HTMLPurifier/TagTransformTest.php | 2 +- tests/HTMLPurifier/TokenFactoryTest.php | 2 +- tests/HTMLPurifier/TokenTest.php | 2 +- tests/HTMLPurifier/URIDefinitionTest.php | 59 ++++ .../DisableExternalResourcesTest.php | 24 ++ .../URIFilter/DisableExternalTest.php | 47 +++ .../URIFilter/HostBlacklistTest.php | 30 ++ .../URIFilter/MakeAbsoluteTest.php | 122 +++++++ tests/HTMLPurifier/URIFilterHarness.php | 15 + tests/HTMLPurifier/URIHarness.php | 31 ++ tests/HTMLPurifier/URIParserTest.php | 140 ++++++++ tests/HTMLPurifier/URISchemeRegistryTest.php | 2 +- tests/HTMLPurifier/URISchemeTest.php | 251 +++++++------- tests/HTMLPurifier/URITest.php | 166 +++++++++ tests/test_files.php | 8 + 73 files changed, 1569 insertions(+), 631 deletions(-) create mode 100644 docs/enduser-uri-filter.html create mode 100644 maintenance/common.php create mode 100755 maintenance/flush-definition-cache.php delete mode 100644 maintenance/flush-htmldefinition-cache.php mode change 100644 => 100755 maintenance/generate-entity-file.php create mode 100755 maintenance/merge-library.php create mode 100644 tests/HTMLPurifier/ComplexHarness.php create mode 100644 tests/HTMLPurifier/HTMLModule/RubyTest.php create mode 100644 tests/HTMLPurifier/URIDefinitionTest.php create mode 100644 tests/HTMLPurifier/URIFilter/DisableExternalResourcesTest.php create mode 100644 tests/HTMLPurifier/URIFilter/DisableExternalTest.php create mode 100644 tests/HTMLPurifier/URIFilter/HostBlacklistTest.php create mode 100644 tests/HTMLPurifier/URIFilter/MakeAbsoluteTest.php create mode 100644 tests/HTMLPurifier/URIFilterHarness.php create mode 100644 tests/HTMLPurifier/URIHarness.php create mode 100644 tests/HTMLPurifier/URIParserTest.php create mode 100644 tests/HTMLPurifier/URITest.php diff --git a/Doxyfile b/Doxyfile index 8ecf65ae..98454090 100644 --- a/Doxyfile +++ b/Doxyfile @@ -4,7 +4,7 @@ # Project related configuration options #--------------------------------------------------------------------------- PROJECT_NAME = HTML Purifier -PROJECT_NUMBER = 2.0.1 +PROJECT_NUMBER = 2.1.0 OUTPUT_DIRECTORY = "C:/Documents and Settings/Edward/My Documents/My Webs/htmlpurifier/docs/doxygen" CREATE_SUBDIRS = NO OUTPUT_LANGUAGE = English diff --git a/VERSION b/VERSION index 10bf840e..50aea0e7 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -2.0.1 \ No newline at end of file +2.1.0 \ No newline at end of file diff --git a/WHATSNEW b/WHATSNEW index 2f0b2d9d..42248b62 100644 --- a/WHATSNEW +++ b/WHATSNEW @@ -1,12 +1,8 @@ -The 2.0.1 release introduces a number of stability and usability fixes, -as well as a number of (disabled by default) experimental features. The -security-minded should note that a reflected XSS vulnerability was patched -in smoketests/configForm.php; if you cannot upgrade immediately, please -delete that file (if that directory is not publically accessible, there -is no security risk). The maintenance changes include more helpful file -permissions errors, internal newline normalization, reordered includes -to prevent a missing class definition in some setups, and better cache -revision and id handling. The two experimental features are auto-formatting -(auto-paragraphing and linkification) and error collection, these can -be enabled with %AutoFormat.AutoParagraph, %AutoFormat.Linkify and -%Core.CollectErrors respectively. +In version 2.1, HTML Purifier's URI validation and filtering handling +system has been revamped with a new, extensible URIFilter system. Also +notable features include preservation of emoticons in PHP5 with +%Core.AggressivelyFixLt, standalone and lite download versions, +transforming relative URIs to absolute URIs, Ruby in XHTML 1.1, a Phorum +mod, and UTF-8 font names. Notable bug-fixes include refinement of +the auto-paragraphing algorithm (no longer experimental), better XHTML +1.1 support and the removal of the contents of